This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_EPwTpyXTdklr6rbc2bFD4AKcjY.roa File: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (raw, json) Hash identifier: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY= Subject key identifier: FC:43:F0:4E:9C:97:4D:D9:25:AF:AA:DB:73:66:C5:0F:80:0A:72:36 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC833760A030950EF18AAD7B49C0DF2 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_EPwTpyXTdklr6rbc2bFD4AKcjY.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2010906 IP address blocks: 89.116.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 14:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:33:76:0a:03:09:50:ef:18:aa:d7:b4:9c:0d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc43f04e9c974dd925afaadb7366c50f800a7236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:4c:9e:03:83:52:0a:4e:04:7e:3a:dc:53: 60:74:30:98:22:f9:36:7f:2d:eb:79:60:e2:3a:e7: 1e:2a:d7:bb:32:6a:45:3a:55:4a:79:00:e2:72:8a: 53:d9:51:d3:a0:3e:c5:18:a7:80:be:8e:c2:91:14: 11:3d:3b:14:86:4c:d1:b9:a8:6b:d2:a6:39:25:44: ac:7d:67:42:b9:5f:ac:e6:c0:47:71:d7:63:55:50: be:70:22:a4:4c:12:82:c9:92:d8:50:cb:31:21:13: 1e:41:98:a8:13:d7:31:b6:76:bd:8c:5a:4f:a3:ff: 85:88:69:27:13:5d:cc:d5:ed:cb:b7:c3:0b:0c:73: 84:86:d3:7f:f6:05:8c:e0:d6:3c:c5:16:e5:7c:db: f1:d6:3d:5c:2e:c6:00:ad:1e:61:9b:09:8e:82:07: 9d:fb:6b:e5:d5:a1:9a:a1:af:4a:3b:a3:2b:42:78: 23:27:3f:df:cf:6b:38:06:7f:c0:ae:2e:63:e6:54: 88:8b:40:3f:4f:84:76:18:71:ce:16:00:38:94:1f: c9:18:bc:e2:0d:df:29:c9:95:c8:ca:97:81:44:8b: 19:d0:ee:fd:df:1e:96:8a:bc:74:fe:7d:79:84:39: f6:8d:5c:06:3c:38:7d:f7:95:d9:f5:bf:10:bf:cc: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:F0:4E:9C:97:4D:D9:25:AF:AA:DB:73:66:C5:0F:80:0A:72:36 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_EPwTpyXTdklr6rbc2bFD4AKcjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.97.0/24 Signature Algorithm: sha256WithRSAEncryption 30:92:bb:df:ad:b5:14:4c:a5:96:94:62:45:7f:3f:c0:6c:6f: 78:0b:8d:e2:28:f9:a6:c1:33:b7:d7:9a:c1:e5:f1:93:d6:66: 35:47:35:2a:14:85:26:ce:08:d2:01:8f:27:b2:72:1e:92:f7: 8b:fe:de:35:c2:1b:ef:49:9c:0d:79:f8:f5:99:a0:a7:3a:36: 42:6d:15:c7:34:a9:fb:8f:9b:bf:42:9b:d1:9d:24:de:2c:da: 08:21:59:84:03:52:5c:e8:97:16:b7:14:e5:f2:28:d4:95:fd: 68:8b:05:1a:ed:bc:51:97:a2:51:22:46:d6:2d:91:6c:33:4b: 9a:65:4b:80:06:4c:17:b5:6a:90:e2:90:3e:45:43:8b:72:0f: 0c:fc:0a:39:32:c8:14:b2:06:81:5c:b4:f1:d3:34:c1:a8:1e: b2:ea:c4:f6:54:37:6a:fa:9f:aa:9f:a3:2a:c8:87:34:5d:67: ca:78:cc:0b:7a:0f:1f:ef:f6:84:70:bc:98:cf:68:3f:d3:70: 49:8a:63:a0:ff:80:3e:1e:e0:db:d0:e2:6c:3d:04:da:0d:23: 84:56:cf:7e:2a:79:40:d6:38:f9:b0:03:9b:50:99:71:49:67: d7:b4:b9:72:eb:4c:b0:61:bd:10:dd:45:fd:07:64:7a:80:06: e2:55:37:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDN2CgMJUO8Yqte0nA3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzQzZjA0ZTljOTc0ZGQ5MjVhZmFhZGI3MzY2YzUwZjgwMGE3MjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqhMngODUgpOBH463FNgdDCYIvk2 fy3reWDiOuceKte7MmpFOlVKeQDicopT2VHToD7FGKeAvo7CkRQRPTsUhkzRuahr 0qY5JUSsfWdCuV+s5sBHcddjVVC+cCKkTBKCyZLYUMsxIRMeQZioE9cxtna9jFpP o/+FiGknE13M1e3Lt8MLDHOEhtN/9gWM4NY8xRblfNvx1j1cLsYArR5hmwmOgged +2vl1aGaoa9KO6MrQngjJz/fz2s4Bn/Ari5j5lSIi0A/T4R2GHHOFgA4lB/JGLzi Dd8pyZXIypeBRIsZ0O793x6Wirx0/n15hDn2jVwGPDh995XZ9b8Qv8xxVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxD8E6cl03ZJa+q23NmxQ+ACnI2MB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvX0VQd1RweVhUZGtscjZyYmMyYkZENEFLY2pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXRhMA0G CSqGSIb3DQEBCwUAA4IBAQAwkrvfrbUUTKWWlGJFfz/AbG94C43iKPmmwTO315rB 5fGT1mY1RzUqFIUmzgjSAY8nsnIekveL/t41whvvSZwNefj1maCnOjZCbRXHNKn7 j5u/QpvRnSTeLNoIIVmEA1Jc6JcWtxTl8ijUlf1oiwUa7bxRl6JRIkbWLZFsM0ua ZUuABkwXtWqQ4pA+RUOLcg8M/Ao5MsgUsgaBXLTx0zTBqB6y6sT2VDdq+p+qn6Mq yIc0XWfKeMwLeg8f7/aEcLyYz2g/03BJimOg/4A+HuDb0OJsPQTaDSOEVs9+KnlA 1jj5sAObUJlxSWfXtLly60ywYb0Q3UX9B2R6gAbiVTd1 -----END CERTIFICATE-----Generated at Thu Jan 8 21:53:25 2026 by rpki-client